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Methods and apparatus for secure optical communications links 


(54) 

(57) Methods and apparatus for providing a secure 
optical communications link are disclosed. Communica- 
tions information Is encrypted with a security key. An 
optical beam is then modulated with both the security 
key and the encrypted communications information, 
with different modulation schemes being used for each. 
The dual-modulated optical beam is then transmitted to 
a receiver. At the receiver, the optical beam is split into 
first and second optica! beams. First and second 
demodulators are then employed to demodulate the 
optical beams to recover the encrypted communications 
information and its data rate, and the security key and 
its data rate. The encrypted communications informa- 
tion, the security key, and the data rate information are 
then sent to decryption and timing circuitry which 
decrypts the encrypted communications information to 
obtain the original unencrypted communications infor- 
mation. 
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Description 

Background of the Invention ^ 

This invention relates to optical communications, s 
and more particularly to secure free-space optical tele- 
communications links. ' ^ 

Free-space optical telecommunications offers ah 
attractive alternative to hard-wired or radio communica- 
tion in certain situations. For example, a telecommuni- io 
cations services provider who wants to enter a new 
geographical area may have little or no hard-wired plant * * ^ 
in that area and may wish to avoid the cost and com- ' 
plexity of installing such plant to serve the new area! 
Similarly, radio communications resources are limited is 
and regulated, and a new telecommunications services 
provider may. not have sufficient rights to use those 
resources jn a new geographical area: 

Free-space optical telecpmmunicationsi is therefore 
attractive because it avoids the need for hard-wired 20 
plant and because, unlike. radio telecommunication, it is 
essentially unregulated. Optical telecommunication ajsp ' 
has the advantage of very iarge information capacity. 
Thus optical telecomrnunicatioris links can support a 
wide range of teleconimunications services such as tel- 25 
ephone, video, audio, and computer data transmission. 

A possible problem with , free-space optical telecom: , ' 
municatipns is that it is subject to cpniproiTTise (i.e... theft ' ' 
through optical beam interception), especially'if a spa- , 
tially broad optical beam is being used. For exahipie.lah 30 
eavesdropper may compromise !a jihe-of-sight. free-, ' 
space optical telecommunications jink by intercepting a . 
portion of the optical power/beirig transmitted through 
the link (e.g., by using an inexpensive photodeteGtor).jlf/ 
the amount of optical power intercepted is . small, the ^ 35 
optical telecommunications link will function normally, ^ 
despite the interception (e.g., there will be ncindicatipn 
that-the link has been compromised). * ; : . . 

While it may be difficult to prevent (or even detect) . . 
the interc^tion of an optica! beairi used in a free-space 40 
optical ^ telecommunications Jink, ' the .' information ! . 
traveling via the telecornmunications link may nonethe- ' 
less be protected from compromise by . ernploying \] 
encryption techniques. "Encryption" refers to the trans- 
formation of information (e.g., "plairrtext'L or any unen- 45 
crypted information) into. , an incomprehensible, . 
"encrypted" form (e.g., "cipher") by means a security 
key. Encrypted information can be "decrypted" (i.e., 
transformed back into comprehensible information) if 
the security key used to encrypt the information is so 
known. Using encryption, techniques, information 
traveling via a free-space optical link may be secured 
(i.e., may be made uncompromiseable) even if the opti- 
cal beam transporting the information is intercepted. 

Information is normally encrypted while in an elec- 55 
tronic form by any. variety of techniques well known in 
the art. The encrypted informatiori is then converted into 
an optical form by modulating an optical beam with the 


encrypted information. The optical beam is then trans- 
mitted to a receiver. In order for the receiver to decrypt 
the encrypted information canried by the optical beam, 
however, the receiver must know the security key used 
during the encryption process. One method for ensuring 
that the receiver has the required security key for 
decryption is to send the security key with the encrypted 
information signal. This may be performed electronically 
by combining the electronic encrypted information with 
an electronic security key to form a hybrid electronic sig- 
nal which' is then used to modulate the optical beam. 
However, such a system requires additional electronic 
circuitry at both the transmitter and receiver for combin- 
ing and separating the encrypted communications infor- 
mation and the security key, and fails to take advantage 
of the easie and isimplicity by which optical beams may 
be modulated/demodulated and the coherent nature of 
the light sources typically used in optica! communica- 
tions links (e.g., lasers). 

In view of the foregoing, it is an object of this inven- 
tion to improve optical telecommunications links. 

It' is a more particular object of this invention to 
reduce the corViptexrty of secure free-space optical tele- 
communications links by providing a simplified method 
for transmitting both encrypted communications infor- 
mation and a security key with the sarhe optica! beam. 

It is yet another object of this invention to utilize the 
phase coherence possessed by optical telecommunica- 
tions light sourceis in order to simplify the transmission 
of encrypted cpmnriunications information and a secu- 
rity key across an optica! telecommunications link. 

Summarv of the Invention " 

These and other objects of the' invention are 
. accomplished in accordarice with tl-ie principles of the 
invention 'by providing a secure optical communications 
link in which an optical beam (e.g:. a laser beam) is 
modulated by both a security' key and encrypted com- 
munications information. 

. ^ Communications information, is encrypted while in 
electronic form by using a secui-ity key. Both the security 
key and the encrypted cpmmunicationis information are 
then, used to rhodulate an optical beam during a first 
and a second modulation stejD.' Preferably, a different 
modulation scheme is used for each rnodulation step 
(e.g., differential phase shift keying is used for the secu- 
rity key modulation step and on/off keying is used for the 
encrypted communications information modulation 
step). The dual -modulated beam is tiien transmitted 
through free space, an optical fiber, or any similar 
medium to a receiver. 

At the receiver, the optical beam is received and 
split into a first and a second optical beam. First and 
second demodulators are then employed to demodulate 
tiie optical beams (the first demodulator demodulating 
the first optical beam to obtain the encrypted communi- 
cations information and its data rate, and the second 
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demodulator demodulating the second optical beam to . 
obtain the security key and its data rate). Once the . 
security key has been acquired, the encrypted commu- ..j^-. 
nications information may be decrypted.(to retrieve the < ...^ 
original communications information). In a preferred 
embodiment wherein, the encrypted communications 
information modulates the optical beam using on/off 
keying, the encrypted communications information; is 
given a higher data rate than the security Key Further. : 
the security key is preferably dynamically varied (i.e., .10 

varied either periodically or at random time intervals) 

Further features of the invention, its nature and yar-^ - 
ious advantages, will be more apparent from, the . . 
accompanying drawing and the following detailed ... 
desaiption of the preferred embodiments. 

Brief Description of the Drawings . • 

FIG. 1 is a simplified schernatic block diagram of an 
illustrative embodiment of a free-space optical telecom- 20 
munications link constructed in accordance vyith the 
invention. - . . 

Detailed Description of the Pref erred Embodiments 

. - . . . '25 

An illustrative secure free-space opticaj telecom: . 
munications link 10 construcfted in accordance vyith this . 
invention is shown in Fli3. 1. In this ill.us1rai^ve,dpto^ 
link, transmission medium 50 is shown as tree space. It 
will be understood' that any other transmission mediurn "30 
(e.g.. an optical fiber or other wavegtnde) may.be simi- , 
larly employed. 

The secure^free-space optical telecommunications 
link 10 of FIG. 1 comprises ehcryptioh and timing cir^^^ 
cuitry 100 coiipied to a transmitter 200 35 
300 coupled to decryption and timing cii'cuitry^40p? 
Encryption and timing circuitry 100 jrijiuts communica- 
tions information via communications informatipn ihp^ 
bus 102, encrypts the coprimunic^ions jnforr^^ 
using a security key. and then'^ptrtputs me security key 40 
and encrypted communicatipris irifbrnriatioh to transrriit- 
ter 200 via security key putpLit bus lO^t and encrypted 
communications inforrnation output l3us 106. respec- 
tively Any encryption circuitry known in the art" may be 
employed for encryption and timing circuitry 100. 45 

Transmitter 200 comprises a laser 202 coupled to a 
differential phase shift keying modulator 204 (hereinaf- 
ter "DPSK modulator 204^ by a first optical fiber 206, 
and an pn/off keying modulator 208 (hereinafter "OOK 
modulator 208") coupled to DPSK modulator 204 via a so 
second opticalfiber 210. While modulator 204 is shown 
as a DPSK modulator and modulator 208 is shown as 
an OOK modulator, these modulator selections are 
merely preferred. For instance, modulator 204 may be 
an OOK modulator and modulator 208 may be a DPSK^ , ss 
modulator. In general. .any other modulation schemes . 
may be used for' modulators 204 and 208. Furthermore, 
any variety of modulation devices may be used (e.g.. 


electro-optic amplitude or phase, acousto-optic. 
traveling wave, and the like). 

Each modulator is further operatively coupled to 
encryption and timing circuity 100 (DPSK modulator 
204 being coupled to encryption and timing circuitry 100 , 
via security key output bus 104 and OOK modulator 208 
being coupled to encryption and timing circuitry 100 via 
encrypted communications information output bus 106) 
which pjoyides each modulator with a modulation signal 
(allowing, tlie.opjtical beam emitted by laser 202 to be' 
dual-modulated). That is. jight, emitted from laser 202 
uaveis along first. optical fiber 206 to DPSK modulator 
204 yvhere it is modulated by the security key output by 
encryption and timing circuitry 100. Once modulated by 
DPSK rnodulator 204, the light then travels along sec- 
ond optical f iber 210 to OOK hnodulatoi; 208 where it is 
modulated by the encrypted cpmrfiu nications informa- 
tion output by encr'yiation' and timing circuitry 100. The 
dual-modulated, light is then trarismitted across trans- 
missiori medium 50 to receiver 300: 

Receiver 3O0 comprises a be^m splitter 302 (which 
receives the light traveling across transmissiori rhedium 
50 and splits it into a first knd a second optical beam), 
an OOK demodulator 304 which receives the first opti- 
cal bearn, and a rhirror 306 which reflects the secorid 
opti^i bi^am t5 a DPSK demodulator 308. 

Upon receipt of the first optical beam! OOK demod- 
ulatdr;3p4 dehcilu first optical beam to obtain 

"the inforiratiPri* conta^ (i.e..' tiie encrypted ' 

communicatipn^' ihfprrr^^ 

of tife ertcrypted comrtTUnlcatiohs inforrnation with a tim- 
ing j'ea)vei7 circu^ (hot shown). The encrypted commu- 
nications' inforrhatio^^^ its' associated data rate are 
then\\output b^deKJr^^^ -^00 via 

encrypted 'dDmm'unira^ timirig bus 310. 

Simn^riy, apoil rec^ipr of .'the second optical beam, 
DPSK demodulator 308'derhddulates the second opti- 
cal bfearh' to cfct&n 'the key infbrmatibn con- 
tained 'thereih and klso recovers the' data rate of the 
security key. the security key and data r^ate' ihfoVmatioh 
are then output tP decryption and timing circuitry 400 via 
security key/timing bus 312. ' . ' 

After receiving the encrypted communications infor- 
mation, tiie sedjrity key. and the data rates associated 
with each, decryption and timing circuitry 400 performs 
all necessary timing/synchronization arid decryption 
processes (described below) to retrieve tiie original 
(unenaypted) communications information from the 
encrypted communications information. The unen- 
aypted communications inforrnation is then output from 
decryption and timing circuitry 400 over a conimunica- 
tions information output bus 402. 

The details of decryption and timing circuitry 400 
are dictated by many factors including the lehgtii of the 
security key used during encryption, the data rates at 
vifhich the security key and the encrypted communica- 
tions information are transmitted to receiver 300. the 
modulation schemes used for modulating the light emit- 
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ted by laser 202 with security key and encrypted com- 
munications information, and the like. If, for instance, 
on/off keying is used by modulator 208 (for modulating 
the laser light with the encrypted communications infor- 
mation), the security key must be transmitted at a data 
rate no greater than one-half of the data rate at which 
the encrypted communications information is sent so as 
to prevent an off state of the encrypted communications 
information from "blanking out" security key data bits. 
That is, if an OOK modulator is employed, an off state 
(i.e., no light) may completely mask any security key 
information if the security key has the same data rate as 
the encrypted communications information. The secu- 
rity key must therefore be transmitted at a lower data 
rate than the encrypted communications information so 
that an off state, will only blank out a small portion of a 
security key data bit, allowing the security key data bit to 
still be recovered. To compensate for the lower data 
rate, decryption and timing circuitry 400 must delay the 
decryption process until the security key is received (as 
encrypted communications information arrives at a 
faster rate than its.associated security key). 

The overall operation of secure free-space optical 
telecommunications link JO w\\\ now be described.. 
Unencrypted communications information Is supplied to 
encryption and timing circuitry 100 (via cornmuriications 
information input bus 1 02) where it is encrypted with a 
security key Encryption, and timing circuitry. 100 then 
outputs both the security key (via security key output 
bus 104) and the encrypted .cornmunicatidns informa- 
tion (via encrypted cornmunications information output 
bus -.1 06) at predetermined data rates. In a prefen-ed 
embodiment, the security key is output at a lower data 
rate than the encrypted communications information so 
that OOK modulation may be usod. In transmitter 200, a 
laser 202 provides an optical beam to DPSK modulator 
204 (via first optical fiber 206) vyhich modulates the op*i- 
cal beam with the security key provided by encryption 
and timing circuitry 100. .This modulated optical beam is 
then fed to OOK modulator 208 (by second optical fiber 
210) which rpodujates. the optical bearri with the 
encrypted communications information from encryption 
and timing circuitry 1 00. ,ln this manner, transmitter 200 
dual-modulates, the optical beam, from [aser 202 with 
security key and encrypted communicatioris informa- 
tion. This dual-modulated optical beam is then transmit- 
ted through transmission medium 50 to receiver 300. 

Upon reception of the dual-modulated optical beam 
by receiver 300, a beam splitter 302 splits the dual-mod- 
ulated optical beam into a first and a second optical 
beam. The first optical beam travels to OOK demodula- 
tor 304 and the second optical beam reflects off of mir- 
ror 306 and travels to DPSK demodulator 308. OOK 
demodulator 304 demodulates the first optical beam to 
obtain the encrypted communications information, 
determines the encrypted comniunications informa- 
tion's data rate, and transmits both pieces of information 
to decryption and . timing circuitry 40.0 over encrypted 


communications information/timing bus 310. DPSK 
demodulator 308, on the other hand, demodulates the 
second optical beam to obtain the security key, deter- 
mines the security key's data rate, and transmits both 

5 pieces of information to decryption and timing circuitry 
400 over security key/timing bus 312. With the informa- 
tion from OOK demodulator 304 and DPSK demodula- 
tor 308, decryption and tinning circuitry 400. decrypts the 
encrypted communications information* to obtain the 

10 original unencrypted communications information sup- 
plied to encryption and timing circuitry 100. The unen- 
crypted communications information produced by 
decryption, and timing circuitry 400 is then output to 
communications Information output bus 402. 

15 It will be understood that the foregoing Is only illus- 
trative of the principles of the invention, and that various 
modifications can be made by those skilled in the art 
without departing from the scope and spirit of the inven- 
tion. For example, any type of encryption scheme may 

20 be employed to secure the. communications information 
sent over optical communications link 10! As well, many 
modulation schemes (OOK, high/low OOK, DPSK, 
amplitude, polarization, and the like) may be utilized, as 
may any variety of modulators (electro-optic, acousto- 

25 optic, traveling . wave. etc.). Furthermore, . while the 
present invention was described in terms of secure free- 
space optical telecommunications links, any optical 
communications link may employ these techniques. 

30 Claims ; . 

1 . A method for producing a secure optical beam com- 

iprising:,. . . . . . 

35 encrypting.communications .information with a 

security key to produce encrypted communica- 
. tionsinfornnation; . , 
providing a first optical beam; and 
producing said secure optical beam by riiodu- 

40 lating said first optical beam with said security 

key using a first modulation scheme and with 
s;aid encrypted - cornnriunications, information 
using a second modulation scheme. 

45 2. The method defined in'ciaim 1 wherein said provid- 
ing comprises: 

providing a coherent first optical beam. 

50 3. The method defined in claim 1 further comprising: 

dynamically varying said security key. 

4, The method defined in claim 1 wherein said produc- 
55 ing comprises: , 

modulating said first optical beam with said 
security key using differential phase shift key- 
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ing. 

5. The method defined in claim 1 wherein said produc- 
ing comprises: ^ / ^ 

modulating said iirst optical beam with said 
encrypted communications information using 
on/off keying. 

6. The method defined in claim 1 further comprising: 

furnishing said encrypted' communications 
information with a higher data rate than said 
security key 

7. A method of securing an optical communications 
link comprising: ! ' ' * 1 

encrypting communications information with a 
security key to produce encrypted communica- 
tions information; 
providing an optical beam: 
modulating said optical beam with said securrty 
key using a first modulation scheme and with 
' said encrypted communications information' 
using a second modulation sch erne: 
transmitting said optical beam; ' ■ 

receiving said optical beam; 
demodulating said optical beam to recover said' ^ 
security key and said encrypted communica- 
tions information; and ' .! 
using said security key to decrypt' said 
encrypted comrnunications information to 
obtain said communications information. 

8. The method defined in claim 1 wherein' said provid- 
ing comprises: 

providing a coherent optical beam. * " 

9. The method defined in claim 7 further comprising: 

dynamically varying said security key. . . ^ , 

1 0. The method defined in claim 7 wherein said modu- 
lating comprises: 

modulating said optical beam with said security 
key using differential phase shift keying. ' 

11. The method defined in claim 7 wherein said modu- 
lating cornprises: 

modulating said optical beam with said 
encrypted communications information using 
on/off keying. • 

12. The method defined in claim 7 further comprising: 


: ! furnishing said encryprted communications 

information with a higher data rate than said 
security key 

5 13. The method defined in claim 7 wherein said trans- 
mitting comprises: 

transmitting said optical b6am through free 
'■ space. 


-'to 


'^5 


20 


14. The method defined in claim 7 wherein said receiv- 
ing comprises: ^ ' 

' receiving said optical beam; 

splitting 'said opticar beam into a f irst optical 
•beam and a second optical beanii; ' 

feeding said first optical beam to a first demod- 
* ulatbr \o obtain said encrypted communica- 

tions information; and 

feeding said second optical beam to a second 
demodulator to obtaih said security key 


15. The method of receiving an optical beam modu- 
lated with encrypted communications information 
'25 and a security key comprising: ■-'•^^ 


^" • receiving said optical-beam; " ' 

* • : splitting said optical beam into a first optical 

' beam and a secbrid optical beam;- ' ' 

• - feeding said first bfaticAl beam to a f irst demod- 
^ • ' ' ulatbr to obtairi said encrypted commuriica- 

- tions information; and - ■ * ' 

' feeding said second optical beam to a sfecohd 
' 'demc>dula[tbr to obtain said security 'key.-* * ' 

1 6. The method bf clairh '1 5 further comprising: 


30 


35 


40 


45 


50 


55 


^ " demcxiulatihg siaid first optical beam to -obtain 
' - "* ' said encrypted communications information; * 
demodulating said second optical beam to 
obtain said security key; and - • ' - 
using ^id security key to decrypt said 
encrypted' icorrimunications information to 
* obtain unecrypted cornmu nidations informa- 
■ tion. • • • ^ ' 

17. 'An apparatus for producing a secure optical beam 
comprising: 

an encryption circuit for encrypting communi- 
cations information with a security key to pro- 
duce encrypted communications information; 
a light source for producing a first optical beam; 
and 

a first modulator for modulating said first optical 
beam with said security key and a second mod- 
* ulator for modulating said first optical beam 
with said encrypted communications informa- 


5 


tion wherein modulating said first optical beam 
with both said security key and said encrypted 
communications information produces said 
secure optical beam. 

18. The apparatus defined in claim 17 wherein said 
light source is a coherent light source. 

19. The apparatus defined in claim 17 wherein said 
security key is a dynamically varying security key. 

20. The apparatus defined in claim 17 wherein said first 
modulator and said second modulator use different 
modulation schemes. 

21 . The apparatus defined in claim 20 wherein said first 
modulator is a differential phase shift keying modu- 
lator 

22. The apparatus defined in claim 20 wherein said 
second modulator is an on/off keying modulator. 

23. The apparatus defined in claim 17 wherein said 
encrypted communications information has a 
higher data rate than said security key. 

24. An apparatus for securing an optical communica- 
tions link connprising: 
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29. The apparatus defined in claim 27 wherein said 
second modulator is an on/off keying modulator. 

30. The apparatus defined in claim 24 wherein said 
encrypted communications information has a 
higher data rate than said security key. 

10 31. The apparatus defined in claim 24 wherein said 
optical beam is transmitted through free space. 

32. The apparatus defined in claim 24 wherein said 
demodulator connprises: 


75 


20 


25 


a first demodulator for demodulating said 
encrypted communications information; and 
a second demodulator for demodulating said 
security key. 

33. The apparatus defined in claim 32 wherein said 
receiver conrprises: i ^ 

a beam splitter for splitting said optical beam 
into a first optical beam and a second optical 
beam, said first optical beam being input to 
said first demodulator and said second optical 
beam being input to said second demodulator. 


an encryption circuit for encrypting communi- 
cations information with a security key to pro- 
duce encrypted communications information: 
a light source for producing an optical beam; 
a first modulator for modulating said optical 
beam with said security key and a second mod- 
ulator for modulating said optical beam with 
said encrypted communications information; 
a transmitter for transmitting said optical beam; 
a receiver for receiving said optical beam; 
a demodulator for recovering said security key 
and said encrypted communications informa- 
tion from said optical beam; and 
a decryption circuit for decrypting said 
encrypted communications information to 
obtain said communications information. 

25. The apparatus defined in claim 24 wherein said 
light source is a coherent light source. 

26. The apparatus defined in claim 24 wherein said 
security key is a dynamically varying security key. 

27. The apparatus defined in claim 24 wherein said first 
modulator and said second modulator use different 
modulation schemes. 

28. The apparatus defined in claim 27 wherein said first 
modulator is a differential phase shift keying modu- 


30 34. The apparatus defined in claim 24 wherein said 
demodulator further comprises: 

timing recovery circuitry for recovering a first 
data rate of said encrypted communications 
35 information and a second data rate of said 

security key 

35. The apparatus defined in claim 34 wherein said 
decryption circuit further comprises: 

40 

timing drcuitry for allowing said encrypted 
communications information to be decrypted 
when said first and second data rates are dif- 
ferent. 

45 

36. An apparatus for receiving an optical beam modu- 
lated with encrypted communications information 
and a security key, said apparatus comprising: 

so a beam splitter for splitting said optical beam 

into a first optical beam and a second optical 
beam, said first optical beam being input to a 
first demodulator to obtain said encrypted com- 
munications information and said second opti- 

55 cal beam being input to a second demodulator 

to obtain said security key. 

37. The apparatus defined in claim 36 further compris- 
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ing: 

a decryption circuit for decrypting .said 
encrypted communications information to ^ 
obtain unencrypted communications informa- s u . 
tion. 

38. The apparatus defined in claim 36 further compris- 
ing: . . 

' ... V 10 

timing recovery circuitry for recovering a first 
data rate of said encrypted communications ; 
information and a second data rate of said 
security key 

39. The apparatus defined in claim 38 further compris- 
ing: 

timing circuitry for allowing said encrypted 
communications information to be decrypted 20 
when said first and second data rates are dif- 
ferent. 
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(54) Methods and apparatus for secure optical communlcatjoris linKs 

(57) Methods arid apparatus for providing a secure 
optical communications link are disclosed. Corn'munica- 
tions information is encrypted with a security key. An 
optical beam is then nrodulated with both the security 
key and the encrypted communications infoirnation, 
with different mpdulation schemes being used for each. 
The dual-modulated optical beam is then transmitted to 
a receiver (300). At the receiver, the optical beam is split 
into first and second optical beams. First (304) and sec- 
ond (308) demodulators are then employed to demodu- 
late the optical beams to recover the encrypted 
communications informatiohland .its data rate, and the 
security key and its data rate. The encrypted communi- 
cations information, the security key^ and the data rate 
information are then sent to decryption and timing cir- 
cuitry which decrypts the encrypted communications 
information to obtain the original unencrypted communi- 
cations information (402). 
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